$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/57cbe266-8395-37ce-a58a-a3ee3d4fd90a.roa File: 57cbe266-8395-37ce-a58a-a3ee3d4fd90a.roa (raw, json) Hash identifier: EfI1kUvUFjs8WfRb6GjaxoPyTGR8KyAsOLJ8HNxo3l4= Subject key identifier: 1E:B5:3F:7A:AC:53:29:10:17:D8:DE:EF:AB:99:73:A5:74:06:43:74 Certificate issuer: /CN=5a791677-2f6b-4828-a754-1d16b76a8a68 Certificate serial: 010D0C9F4328584CA75C697E22644AE2DC881C80 Authority key identifier: 02:D8:E5:C8:93:A4:F8:02:B6:34:D9:B5:1F:8F:41:55:BB:6A:99:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/57cbe266-8395-37ce-a58a-a3ee3d4fd90a.roa Signing time: Mon 26 Jan 2026 14:00:41 +0000 ROA not before: Mon 26 Jan 2026 14:00:41 +0000 ROA not after: Sun 26 Apr 2026 13:00:41 +0000 asID: 46951 IP address blocks: 23.131.28.0/24 maxlen: 24 2602:f768::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:5c:69:7e:22:64:4a:e2:dc:88:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a791677-2f6b-4828-a754-1d16b76a8a68 Validity Not Before: Jan 26 14:00:41 2026 GMT Not After : Apr 26 13:00:41 2026 GMT Subject: CN=f1945336-8d3d-4936-9dd8-670e47929218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9c:1e:af:c5:1d:26:79:81:73:7d:7b:56:31: 43:af:e4:02:13:32:e5:f0:eb:a6:70:5c:0f:97:f2: 54:62:f3:3b:03:65:8f:a0:cc:7c:88:b7:df:ea:75: b1:51:45:c0:8b:01:dc:2a:f5:e6:cb:e7:79:14:a2: b5:65:b2:79:69:8b:99:d8:ac:4c:dd:4a:c8:ab:3c: 54:ce:c1:ba:68:e7:26:c7:b6:73:1a:ee:0c:ce:10: 49:ba:ae:41:85:53:96:3c:7a:d6:90:3f:6d:78:57: 6b:81:8f:04:3d:be:0d:ad:90:f7:dd:e9:60:6c:68: 1d:d2:65:4b:ed:77:ef:26:0b:17:87:ef:9d:2b:40: 02:60:9d:d7:84:d1:8c:df:a0:88:08:74:80:0c:fe: f0:83:d5:d7:82:99:64:77:44:9e:7f:09:5c:bd:e7: e0:11:c5:b6:c1:5c:d9:10:7a:1b:e1:94:21:fd:49: a6:41:07:65:7b:9e:b9:67:2a:08:6b:56:10:fe:3f: 7e:92:3d:ef:e9:bf:9d:23:2a:a9:45:35:f1:01:88: c6:58:c2:f6:cb:01:c1:40:01:67:8b:f9:b0:32:b1: 6d:75:9d:f6:6b:6c:3d:00:9b:0a:71:a7:18:fe:25: fb:34:e7:48:89:b3:45:d2:1d:1b:59:77:e9:b9:5f: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B5:3F:7A:AC:53:29:10:17:D8:DE:EF:AB:99:73:A5:74:06:43:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/57cbe266-8395-37ce-a58a-a3ee3d4fd90a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.crl X509v3 Authority Key Identifier: keyid:02:D8:E5:C8:93:A4:F8:02:B6:34:D9:B5:1F:8F:41:55:BB:6A:99:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer sbgp-ipAddrBlock: critical IPv4: 23.131.28.0/24 IPv6: 2602:f768::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c5:07:02:39:88:a0:9e:93:d8:71:f0:e2:1a:6f:22:3c:b1: 99:dd:f8:b7:99:a0:11:c9:59:8e:ba:2c:22:d7:59:b3:d4:d5: 92:20:37:9a:e3:a5:a6:58:29:cb:5d:ef:c1:64:fd:62:83:b4: fc:59:2d:23:c9:d6:a6:80:8d:fa:3a:a9:08:4a:e6:b8:64:4b: a1:62:e9:4c:07:f7:de:46:8c:d3:cb:39:96:57:a0:c8:24:70: da:4f:47:2c:5b:f5:c3:e7:7a:19:b1:12:c8:9e:25:fe:bc:53: 44:81:08:7d:27:d2:d7:dd:89:bc:d1:c6:6f:56:11:5a:57:18: f0:e2:1e:e8:1c:a4:5c:25:c9:ce:99:cc:6b:21:d6:6e:ab:17: 8b:9a:be:bd:6d:1a:ce:d4:f8:47:1e:30:69:89:6d:97:9e:b3: 76:f3:53:3f:aa:42:9b:90:3a:d4:b2:1b:44:1c:8e:4f:30:87: 04:ef:29:25:57:4b:60:9b:ac:c0:2b:a2:48:05:eb:db:96:a8: 8f:33:c8:a9:24:f5:ed:b0:7e:fc:d0:13:b5:9d:c3:c4:a6:3f: e2:b5:44:d2:33:98:22:3c:34:99:92:1d:20:52:d3:5c:a5:04: d7:77:96:f3:c4:33:d1:f4:e4:b1:ee:14:d3:17:05:99:bf:74: 5a:9c:62:8a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEynXGl+ImRK4tyIHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE3OTE2NzctMmY2Yi00ODI4LWE3NTQtMWQxNmI3NmE4 YTY4MB4XDTI2MDEyNjE0MDA0MVoXDTI2MDQyNjEzMDA0MVowLzEtMCsGA1UEAxMk ZjE5NDUzMzYtOGQzZC00OTM2LTlkZDgtNjcwZTQ3OTI5MjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpwer8UdJnmBc317VjFDr+QCEzLl8OumcFwP l/JUYvM7A2WPoMx8iLff6nWxUUXAiwHcKvXmy+d5FKK1ZbJ5aYuZ2KxM3UrIqzxU zsG6aOcmx7ZzGu4MzhBJuq5BhVOWPHrWkD9teFdrgY8EPb4NrZD33elgbGgd0mVL 7XfvJgsXh++dK0ACYJ3XhNGM36CICHSADP7wg9XXgplkd0SefwlcvefgEcW2wVzZ EHob4ZQh/UmmQQdle565ZyoIa1YQ/j9+kj3v6b+dIyqpRTXxAYjGWML2ywHBQAFn i/mwMrFtdZ32a2w9AJsKcacY/iX7NOdIibNF0h0bWXfpuV8xLQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFB61P3qsUykQF9je76uZc6V0BkN0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YTc5 MTY3Ny0yZjZiLTQ4MjgtYTc1NC0xZDE2Yjc2YThhNjgvNTdjYmUyNjYtODM5NS0z N2NlLWE1OGEtYTNlZTNkNGZkOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWE3OTE2NzctMmY2Yi00ODI4LWE3 NTQtMWQxNmI3NmE4YTY4LzVhNzkxNjc3LTJmNmItNDgyOC1hNzU0LTFkMTZiNzZh OGE2OC5jcmwwHwYDVR0jBBgwFoAUAtjlyJOk+AK2NNm1H49BVbtqmUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YTc5MTY3Ny0yZjZiLTQ4MjgtYTc1NC0xZDE2 Yjc2YThhNjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4McMA4E AgACMAgDBgQmAvdoADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfxQcCOYignpPYcfDiGm8iPLGZ3fi3maAR yVmOuiwi11mz1NWSIDea46WmWCnLXe/BZP1ig7T8WS0jydamgI36OqkISua4ZEuh YulMB/feRozTyzmWV6DIJHDaT0csW/XD53oZsRLIniX+vFNEgQh9J9LX3Ym80cZv VhFaVxjw4h7oHKRcJcnOmcxrIdZuqxeLmr69bRrO1PhHHjBpiW2XnrN281M/qkKb kDrUshtEHI5PMIcE7yklV0tgm6zAK6JIBevblqiPM8ipJPXtsH780BO1ncPEpj/i tUTSM5giPDSZkh0gUtNcpQTXd5bzxDPR9OSx7hTTFwWZv3RanGKK -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:59 2026 by rpki-client